7645 matches found
DEBIAN-CVE-2010-3697
The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...
CVE-2010-3697
The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...
CVE-2010-3697
The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...
CVE-2010-3731
Stack-based buffer overflow in the validateUser implementation in the com.ibm.db2.das.core.DasSysCmd function in db2dasrrm in the DB2 Administration Server DAS component in IBM DB2 9.1 before FP10, 9.5 before FP6a, and 9.7 before FP3 allows remote attackers to execute arbitrary code via a long...
IBM WebSphere Application Server 6.0 < 6.0.2.43 Multiple Vulnerabilities
IBM WebSphere Application Server 6.0 before Fix Pack 43 for 6.0.2 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - The Web Container does not properly handle long filenames, which could cause it to respond with the incorrect file,...
Microsoft Visual Basic - '.VBP' Local Buffer Overflow (Metasploit)
$Id: msvisualbasicvbp.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
California Man Gets 6 Years for Laundering
A Long Beach, California man who helped funnel stolen cash to a global network of hackers and carders was sentenced Thursday to 6 years in prison for conspiracy to launder money. Cesar Carranza, 38, sold MSR-206’s to carders to encode stolen bank card data onto blank cards, and he served as a...
DEBIAN-CVE-2010-2799
Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments...
The Effect of Snake Oil Security
I’ve talked about this a few times over the years during various presentations but I wanted to document it here as well. It’s a concept that I’ve been wrestling with for 7+ years and I don’t think I’ve made any headway in convincing anyone, beyond a few head nods. Bad security isn’t just bad...
CVE-2010-3108
Buffer overflow in the browser plugin in Novell iPrint Client before 5.42 allows remote attackers to execute arbitrary code by using EMBED elements to pass parameters with long names...
DEBIAN-CVE-2008-7258
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service application exit via an e-mail message containing a long line that begins with a . dot character. NOTE: CVE disputes this issue because it is solely a usability problem for...
CVE-2008-7258
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service application exit via an e-mail message containing a long line that begins with a . dot character. NOTE: CVE disputes this issue because it is solely a usability problem for...
QuickTime Player Streaming Debug Error Logging Buffer Overflow Vulnerability
The host is running QuickTime Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbapplequicktimeplayerbofvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ QuickTime Player Streaming Debug Error Logging Buffer Overflow Vulnerability Authors: Madhuri D Copyright:...
Safari for windows Long link DoS
Exploit for windows platform in category dos / poc ================================ Safari for windows Long link DoS ================================ Safari for windows Long link DoS Vendor URL:http://www.apple.com/safari/...
Safari Long Link Denial Of Service
Safari for windows Long link DoS Vendor URL:http://www.apple.com/safari/ Advisore:http://lostmon.blogspot.com/2010/08/safari-for-windows-long-link-dos.html Vendor notified:Yes exploit available: YES Safari is prone vulnerable to Dos with a very long Link... This issue is exploitable via web links...
MS07-029 Microsoft DNS RPC Service extractQuotedChar() Overflow (SMB)
This module exploits a stack buffer overflow in the RPC interface of the Microsoft DNS service. The vulnerability is triggered when a long zone name parameter is supplied that contains escaped octal strings. This module is capable of bypassing NX/DEP protection on Windows 2003 SP1/SP2. This modul...
IBM AIX 5l - FTPd Remote DES Hash
IBM AIX 5l - FTPd Remote DES Hash / IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on 4.X too bug found & exploited by Kingcope Version 2.0 - July 2010...
CVE-2010-2771
solid.exe in IBM solidDB before 6.5 FP2 allows remote attackers to execute arbitrary code via a long username field in the first handshake packet...
DEBIAN-CVE-2009-4897
Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document containing a long name...